Privacy Policy

1. Who operates SightSweep

SightSweep is the project operated by Joe Elio. This notice applies to sightsweep.com, the private tester portal, and SightSweep app features that connect to that portal. It does not replace the independent privacy policies of ChatGPT, Apple, Meta, Cloudflare, or other services you use. A legal entity, postal address, and final jurisdictional disclosures must be confirmed before a commercial launch.

Use the public Privacy request form at /privacy-request for privacy questions, access, correction, deletion, consent withdrawal, or a concern about a person appearing in footage. You do not need a SightSweep account to submit that form. Do not include sensitive identification documents, health records, or payment information. Save your request reference; we may contact you using the address you supply to verify and respond to the request.

2. Account and contact information

Website sign-in is provided through ChatGPT. SightSweep receives a site-specific user identifier and an email address from the hosting platform; a display name may also be supplied. SightSweep does not collect or store your ChatGPT password. You choose a tester display name and confirm that you are at least 18. We record the agreement version, affirmative acceptance choices, and acceptance time.

An early-access waitlist signup is a separate record containing an email address, signup placement, and creation time. Creating a tester account does not enroll you in promotional email. Deleting a tester account does not automatically remove a separate waitlist record; use the Privacy request form to request that removal.

3. Videos and feedback

We receive only the files and feedback you deliberately submit to the portal or a connected app upload feature. A submission includes video bytes, filename, size, file type, a title, result label, expected alert, event timestamp, comment, footage type, and optional app version, model version, sensitivity, and frame rate. A connected app may supply these diagnostics automatically when you choose to upload. The current portal does not continuously upload or remotely monitor the glasses camera.

Video may reveal people, voices, faces, vehicles, license plates, homes, workplaces, surroundings, approximate location, or health and disability information. Even without a separate location field, those details or embedded file metadata may be identifying. The portal does not automatically blur faces, remove audio, or strip metadata. Review and edit a file before submitting it. Do not submit confidential, intimate, highly sensitive, or unlawfully recorded material.

4. Why information is used

We use account information to identify your submissions, provide private access, maintain agreement records, respond to your requests, and secure the service. We use submitted footage and feedback to investigate reported behavior, reproduce problems, annotate relevant events, evaluate detection, and build internal regression tests. Labels are reviewed by the developer; a tester's label is not automatically accepted as ground truth.

Uploading does not change the detector, retrain a model, or remotely update the installed app. Future model training is a separate, optional permission for each clip. Until an appropriate training process and platform rights have been confirmed, that permission records eligibility only. We do not use uploaded footage to train general-purpose third-party AI models or sell it as a dataset.

Public demos, advertising, social media, or other marketing use require the separate, optional marketing choice for that clip. Declining either optional choice does not prevent internal feedback review. Permission is not an assurance that a clip will be selected, and it does not establish rights in other people depicted in the footage.

5. Access and service providers

Submissions are private. A signed-in tester can access their own clips; the SightSweep owner can review submissions for development and handle privacy requests. Other testers cannot browse your submissions. If additional reviewers are introduced, access must be limited to authorized personnel who need it and are subject to confidentiality and appropriate data handling duties.

The portal uses Cloudflare-hosted compute, a structured database, and private object storage through the Sites platform. ChatGPT supplies website authentication. These providers process information to operate, protect, and maintain their services under their own terms. They may process infrastructure logs or security information separately. No public file bucket or public video gallery is used for tester uploads.

We may disclose information when required by valid legal process, to protect people or investigate abuse, or in a business transfer with appropriate protections and notice where required. This does not authorize unrestricted disclosure or a new purpose inconsistent with your choices. The present portal has no advertising tracker, data broker integration, or sale or sharing of personal information for cross-context behavioral advertising.

6. App linking and security

A connected app uses a browser sign-in and an explicit device approval step. Temporary link requests expire after 10 minutes. App credentials expire after 30 days and can be revoked from Account. SightSweep stores a cryptographic hash of each app credential and the device name, creation time, and expiry; it does not expose that credential to other testers. The app should store credentials in the iOS Keychain.

We use access checks and private storage to reduce unauthorized access. No internet service is completely secure. Website and infrastructure providers may maintain cookies, request information, IP addresses, and security logs. SightSweep briefly stores a hashed request-origin IP identifier and an attempt count to limit abuse; those counters expire after 10 minutes and are removed during portal maintenance. An ordinary hash is a pseudonymous abuse-control measure, not a claim of irreversible anonymization.

7. Retention

Completed clips and their associated feedback stop being accessible through the portal 365 days after a successful upload. Incomplete uploads expire after 24 hours. Expired objects and records are deleted in bounded batches during subsequent portal operations. If the service is inactive, physical deletion may occur later than the access expiry. A dedicated scheduled purge should be adopted before making a guaranteed deletion-time promise.

Account profiles and agreement history are retained while the account exists. A clip deletion leaves a minimal permission and deletion event in your account history until you delete the account. Privacy requests are retained for up to 365 days in the portal and removed during normal maintenance. Infrastructure backups and provider logs follow the providers' own retention arrangements; immediate erasure of every backup cannot be guaranteed.

A legal preservation requirement may override routine deletion only to the extent law requires it. The current automatic deletion flow does not implement a legal-hold process. Before instituting such a process, SightSweep must define the applicable basis, restricted access, duration, and notice rather than silently retaining data under a broad exception.

8. Your controls

In My clips you can view and delete a submission and change its optional training and marketing permissions. Deleting a clip removes its portal video and feedback. To withdraw the required internal-development permission, delete the clip. In Account you can download an account and consent export, revoke linked devices, and delete the tester account and its clips. Individual videos can be accessed separately while available.

Account deletion removes the active portal account, its video objects and feedback, its consent records, and its linked app access. If a storage failure interrupts deletion, the account is marked as deleting and normal access stops; retry deletion to complete removal. Deleting SightSweep does not delete your ChatGPT account, recordings stored locally on your phone, files you exported, or independent waitlist entries.

Withdrawal stops new uses within the relevant permission. If a future model has already been trained, removing an identifiable source clip does not necessarily remove its influence from non-identifying model parameters. We must describe the actual training process before relying on that limitation. For marketing, we will stop new uses and consider removal from channels we control; copies made by unrelated third parties may be outside our control. The current portal has no automatic training or marketing-publication process.

9. Requests and regional rights

Depending on your location and applicable law, you may have rights to access, correct, delete, obtain a portable copy, restrict or object to certain processing, withdraw consent, or appeal a denied request. Submit the Privacy request form, including a way to identify the relevant record or footage. We will review identity and authority proportionately, avoid disclosing another person's information, and respond within the period applicable to the request. No fee is charged for ordinary requests.

We do not claim that a particular state privacy statute applies or does not apply without checking its thresholds and exemptions. This version is not an EU or UK launch notice and does not identify a GDPR representative, data protection officer, or country-specific legal bases. Those disclosures, cross-border transfer safeguards, and complaint channels must be added if the actual audience requires them.

10. Children and bystanders

Tester accounts are for adults 18 and older. We do not intentionally invite children to submit videos or solicit their personal information. Age confirmation is self-attestation, not an identity-verification system. If a child has submitted information, contact us so we can investigate and remove it as appropriate.

People appearing in footage may contact us without an account. Identify the scene and approximate recording date or submission reference without supplying unnecessary sensitive information. A tester's upload permission cannot waive a bystander's rights. We may restrict or remove footage while reviewing a concern, even if the uploader gave permission.

11. Changes

The portal records the version accepted by each account and each clip. A materially changed agreement requires a new affirmative acceptance before further submissions. We will not treat silence as permission to add model training or public marketing use to an existing clip. Update notices and counsel-approved text must reflect actual practices; describing an intended feature does not establish that it is implemented.